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EXAMINER'S AMENDMENT AND REASONS FOR ALLOWANCE 

1 . An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
L3 12. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Cory Claassen (50,296) on 3 1 March 2006. 

The apphcation has been amended as follows: 

Claim 9, line 6, after the words "pre-boot phase of delete the word "the" and insert the 
word —a—. 

Claim 27, line 3, after the words "pre-boot phase of delete the word "the" and insert the 
word -a-. 

Claim 27, Une 2, following the word "comprising:" insert the phrase —implementing an 
extensible firmware framework via which firmware modules are loaded during a pre-boot phase 
of a computer system;—. 



2. The following is an examiner's statement 
Applicants' arguments submitted on 30 
have been found persuasive. While the prior 



of reasons for allowance: 

January 2006 have been fiilly considered and 

art of record teaches an extensible firmware 
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interface ["Extensible Firmware Interface Specification Version 1 .02" by Intel Corporation], 
using a VMM to emulate legacy hardware [US Patent No. 6,397,242 to Devine et al.], and 
authenticating firmware modules by comparing digital signatures [US Patent No. 5,844,986 to 
Davis et al.], these isolated teachings are insufficient to render the claimed invention obvious. 

As suggested by Applicants' arguments, in Devine, "Whatever authentication technique 
is used, the salient feature is that it is performed within the cryptographic coprocessor on the 
local version of the new BIOS program." (column 4, lines 4-7). This teaching is distinct from 
the positively recited limitations of each independent claim. 

Therefore, none of the references taken either alone or in combination with the prior art 
of record disclose a method or apparatus specifically including: 

(Claim 9) implementing an extensible firmware framework via which firmware modules 
are loaded during a pre-boot phase of a computer system; implementing a firmware-based virtual 
machine monitor (VMM) upon the computer system; and authenticating, via the VMM, at least 
one of the firmware modules that is loaded during the pre-boot phase by comparing a digital 
signature provided with the at least one of the firmware modules with valid digital signatures 
stored in a secure storage that is accessible to the VMM, but which the VMM makes inaccessible 
to the firmware modules and the legacy code, 

(Claim 15) the computer system including an extensible firmware framework via which 
firmware modules are loaded during a pre-boot phase of the computer system; and a virtual 
machine monitor ("VMM") implemented thereon, the VMM further authenticating the firmware 
modules loaded during the pre-boot phase by comparing digital signatures provided with the 
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firmware modules with valid digital signatures stored in secure storage accessible to the VMM, 
but which the VMM makes inaccessible to the firmware modules, 

(Claim 27) implementing an extensible firmware fi^amework via which firmware modules 
are loaded during a pre-boot phase of a computer system; implementing a virtual machine 
monitor (VMM) during the pre-boot phase of the computer system; and authenticating a 
firmware module via the VMM by comparing a digital signature provided with the firmware 
module to the digital signatures in the secure storage, 

in combination with the remaining elements and features of the claimed invention. It is 
for these reasons that AppUcants' invention defines over the prior art of record. 

Regarding the claim terminology, it is noted that "extensible firmware framework" is 
known in the art as defined by, for example, "Extensible Firmware Interface Specification 
Version 1 .02" by Intel Corporation. Applicants' remarks make it clear that "authenticating, via 
a VMM" means authenticating with software, not hardware: 

In contrast, independent claim 9 recites authenticating firmware modules with a VMM. A VMM is 
software — ^not hardware — and distinctly different from a cryptographic coprocessor. (Apphcants' response 
30 January 2006, page 7) 

Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance." 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jason Proctor whose telephone number is (571) 272-3713. The 
examiner can normally be reached on 8:30 am-4:30 pm M-F. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Paul Rodriguez can be reached at (571) 272-3753, The fax phone number for the 
organization where this application or proceedmg is assigned is (571) 273-8300. 

Any inquiry of a general nature or relating to the status of this application should be 
directed to the TC 2100 Group receptionist: 571-272-2100. Information regarding the status of 
an application may be obtained from the Patent Application Information Retrieval (PAIR) 
system. Status information for published applications may be obtained from either Private PAIR 
or PubUc PAIR. Status information for unpublished applications is available through Private 
PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. 
Should you have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 



Jason Proctor 
Examiner 
Art Unit 2123 




